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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS: 

1 . (Currently Amended) A method of securely implementing a public-key 
cryptography algorithm in a microprocessor-based system, the public key being 
composed of an integer n that is a product of two large prime numbers p and q, and 
of a public exponent e, said algorithm also including a private key, said method 
determining a set E comprising a predetermined number of prime numbers e s that 
can correspond to the value of the public exponent e, and comprising the following 
steps: 

a) computing a value 0 = n ei 

ei e E 

such that cp le\ is less than O(n) for any ei belonging to E, where cp is the Euler totient 
function; 

b) applying the value cp to a predetermined computation involving, as a 
modular product, only the modular product of cp multiplied by said private key of the 
algorithm; 

c) for each ej, testing whether the result of said predetermined computation is 
equal to a value cp le x \ 

- if so, then attributing the value e\ to e, and storing e for subsequ e nt us o i n 
computations of said cryptography a l gor i thm ; 

- otherwise, indicating that the computations of the cryptography algorithm 
using the value e cannot be performed : and 

d) performing a cryptographic operation on data using the stored value for e . 

2. (Previously Presented) A method according to claim 1, wherein the 
cryptography algorithm is based on an RSA-type algorithm in standard mode. 
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3. (Previously Presented) A method according to claim 2, wherein the 
predetermined computation of step b) comprises computing a value C: 

C = O .d modulo O(n), where d is the corresponding private key of the RSA 
algorithm such that e.d = 1 modulo <D(n) and O is the Euler totient function. 

4. (Previously Presented) A method according to claim 2, wherein the 
predetermined computation of step b) comprises computing a value C: 

C = <t> .d modulo 0 (n), where d is the corresponding private key of the RSA 
algorithm such that e.d = 1 modulo O (n), with O being the Carmichael function. 

5. (Previously Presented) A method according to claim 1, wherein the 
cryptography algorithm is based on an RSA-type algorithm in CRT mode. 

6. (Previously Presented) A method according to claim 5, wherein the 
predetermined computation of step b) comprises computing a value C: 

C = O .dp modulo (p-1), where d p is the corresponding private key of the RSA 
algorithm such that e.d p = 1 modulo (p-1). 

7. (Previously Presented) A method according to claim 5, wherein the 
predetermined computation of step b) comprises computing a value C: 

C = O .d q modulo (q-1), where d q is the corresponding private key of the RSA 
algorithm such that e.d q = 1 modulo (q-1). 

8. (Previously Presented) A method according to claim 5, wherein the 
predetermined computation of step b) comprises computing two values Ci and C 2 
such that: 

Ci = 0 .dp modulo (p-1), where d p is the corresponding private key of the RSA 
algorithm such that e.d p = 1 modulo (p-1); 

C 2 = 0 .d q modulo (q-1), where d q is the corresponding private key of the RSA 
algorithm such that e.d q = 1 modulo (q-1); 

and wherein the test step c) comprises, for each e if testing whether Ci and/or 
C 2 is equal to the value 0 /e\\ 
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- if so, then attributing the value ej to e and storing e for subsequent use in 
computations of said cryptography algorithm; 

- otherwise, indicating that the computations of said cryptography algorithm 
using the value e cannot be performed. 

9. (Previously Presented) A method according to claim 3 and in which a value 
ei has been attributed to e, wherein the computations using the value e comprise: 

choosing a random integer r; 

computing a value d* such that d* = d+r.(e.d-1); and 
implementing a private operation of the algorithm in which a value x is 
obtained from a value y by applying the relationship x = y d * modulo n. 

10. (Previously Presented) A method according to claim 2, in which a value e\ 
has been attributed to e, and further including the step, after a private operation of 
the algorithm, of obtaining a value x from a value y, and wherein the computations 
using the value e comprise checking whether x e = y modulo n. 

1 1 . (Previously Presented) A method according to claim 5, in which a value ej 
has been attributed to e, and further including the step, after a private operation of 
the algorithm, of obtaining a value x from a value y, and wherein the computations 
using the value e comprise checking whether x e = y modulo p and whether x e = y 
modulo q. 

12. (Previously Presented) A method according to claim 1, wherein the set E 
comprises at least the following e» values: 3, 17, 2 16 +1. 

13. (Currently Amended) An electronic component comprising means for 
i mplom o nting tho method according to c l a i m 1 executing the following steps: 

a) computing a value O = 11 ei 

ei e E 



such that O /ei is less than <P(n) for any e i belonging to E. where O is the Euler totient 
function; 
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b) applying the value cp to a predetermined computation involving, as a 
modular product, only the modular product of Q multiplied by a private key of the 
algorithm; 

c) for each e [% testing whether the result of said predetermined computation is 
egual to a value Q /ei: 

- if so, then attributing the value e , to e, and storing e; 

- otherwise, indicating that the computations of the cryptography algorithm 
using the value e cannot be performed; and 

d) performing a cryptographic operation on data using the stored value for e . 

14. (Previously Presented) A smart card including the electronic component 
of claim 13. 

15. (Currently Amended) A method of securely implementing a public-key 
cryptography algorithm in a microprocessor-based system, the public key being 
composed of an integer n that is a product of two large prime numbers p and q, and 
of a public exponent e, said method determining a set E comprising a predetermined 
number of prime numbers e; that can correspond to the value of the public exponent 
e, and comprising the following steps: 

a) choosing a value e\ from the values of the set E; 

b) if cp(p)= cp(q), where cp(n), cp(p), and 0(q) are functions giving the 
number of bits encoding respectively the number n, the number p, and the number q, 
testing whether the chosen ei value satisfies the relationship: 

(l-ej.d)modulo n < ei .2 (cp(n)/2)+1 
or said relationship as simplified: 
(-ei.d)modulo n < ei .2 (0(n)/2)+1 

c) if the test relationship applied in the preceding step is satisfied, defining 
e = ei, and storing e for subsequent uso i n computations of sa i d cryptography 
a l gor i thm ; 

- otherwise, reiterating the preceding steps while choosing another value for e t 
from the set E until an ej value can be attributed to e and, if no e s value can be 
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attributed to e, then indicating that the computations of said cryptography algorithm 
using the value of e cannot be performed ; and 

d) performing a cryptographic operation on data using the stored value for e . 

16. (Previously Presented) A method of securely implementing a public-key 
cryptography algorithm according to claim 15, wherein step b is performed in the 
following manner when 0(p) ^cp(q), i.e. when p and q are unbalanced, testing 
whether the chosen e> value satisfies the following relationship: 

(1-ei.d) modulo n<ej.2 9+1 

or said relationship as simplified: 

(-ej.d) modulo n < ej.2 9+1 

with g=max (cp(p), <P(q)), if <P(p) and <t>(q) are known, or, otherwise, with 
g=0(n)/2+t, where t designates the imbalance factor or a limit on that factor. 

17. (Previously Presented) A method according to claim 16, wherein, for all 
values of i, ej<2 16 +1, step b) is replaced by another test step comprising: 

b) if 0(p)=cp(q), testing whether the chosen e\ value satisfies the relationship: 
(l-ej.d)modulo n < ej.2 (<p(n)/2)+17 
or said relationship as simplified: 
(-ei.d)modulo n < ej .2 (cp(n)/2)+17 

where cp(p), <p(q), and <t>(n) are functions giving the numbers of bits 
respectively encoding the number p, the number q, and the number n; 

otherwise, when p and q are unbalanced, testing whether the chosen ej value 
satisfies the following relationship: 

(1-ei.d) modulo n<ej.2 9+17 

or said relationship as simplified: 

(-es.d) modulo n < ei.2 9+17 

with g=max (cp(p),<t>(q)), if cp(p) and cp(q) are known, or, otherwise, with 
g=cp(n)/2+t, where t designates the imbalance factor or a limit on that factor. 

18. (Previously Presented) A method according to claim 16, wherein step b) 
is replaced with another test step comprising: 
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testing whether the chosen e; value satisfies the relationship whereby: 
a predetermined number of the first most significant bits of (1-ej.d) modulo n 
are zero; 

or said relationship as simplified whereby: 

said predetermined number of the first most significant bits of (-ei.d) modulo n 
are zero. 

19. (Previously Presented) A method according to claim 18, wherein the test 
is performed on the first 128 most significant bits. 

20. (Previously Presented) A method according to claim 15, wherein the 
cryptography algorithm is based on an RSA-type algorithm in standard mode. 

21 . (Previously Presented) A method according to claim 15 wherein, when an 
ej value has been attributed to e, the computations using the value e comprise: 

- choosing a random integer r; 

- computing a value d* such that d* = d+r.(e.d-1); 

implementing a private operation of the algorithm in which a value x is 
obtained from a value y by applying the relationship x = y d * modulo n. 

22. (Previously Presented) A method according to claim 15 wherein, when an 
ei value has been attributed to e, after a private operation of the algorithm, a value x 
is_obtained from a value y and the computations using the value e comprise 
checking whether x e = y modulo n. 

23. (Previously Presented) A method according to claim 15, wherein the set 
E comprises at least the following e\ values: 3, 17, 2 16 +1. 

24. (Previously Presented) A method according to claim 23, wherein the 
preferred choice of the values e\ from the values of the set E is made in the following 
order: 2 16 +1, 3, 17. 
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25. (Currently Amended) An electronic component comprising means for 
implomont i ng th e m e thod according to c l a i m 15 executing the following steps: 

a) choosing a value e \ from the values of the set E; 

b) if Q(p)= O(g), where O(n), O(p), and O(g) are functions giving the 
number of bits encoding respectively the number n, the number p, and the number g. 
where n is an integer that is a product of two large prime numbers p and g, testing 
whether the chosen ei value satisfies the relationship: 

(l-ei.d)modulo n < ei.2 (q>(n)/2) + 1 
or said relationship as simplified: 
(-ei.d)modulo n < ei.2 ((p(n)/2)+1 

c) if the test relationship applied in the preceding step is satisfied, defining 
e - e i , and storing e: 

- otherwise, reiterating the preceding steps while choosing another value for e. 
from the set E until an e ; value can be attributed to e and, if no ei value can be 
attributed to e, then indicating that the computations of said cryptography algorithm 
using the value of e cannot be performed; and 

d) performing a cryptographic operation on data using the stored value for e . 

26. (Previously Presented) A smart card including the electronic component 
of claim 25 . 

27. (Previously Presented) A method according to claim 15, wherein, for all 
values of i, ej<2 16 +1, step b) is replaced by another test step comprising: 

b) if <P(p)=cp(q), testing whether the chosen ei value satisfies the relationship: 
(l-ej.d)modulo n < ei .2 (<p(n)/2)+17 
or said relationship as simplified: 
(-ei.d)modulo n < ei .2 (<p(n)/2)+17 

where cp(p), <p(q), and <p(n) are functions giving the numbers of bits 
respectively encoding the number p, the number q, and the number n; 

otherwise, when p and q are unbalanced, testing whether the chosen ej value 
satisfies the following relationship: 

(1-ej.d) modulo n<ej.2 9+17 
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or said relationship as simplified: 
(-ej.d) modulo n < ej.2 9+17 

with g=max (0(p),<t>(q)), if <£(p) and (f>(q) are known, or, otherwise, with 
g=<t>(n)/2+t, where t designates the imbalance factor or a limit on that factor. 

28. (Previously Presented) A method according to claim 15, wherein step b) 
is replaced with another test step comprising: 

testing whether the chosen ej value satisfies the relationship whereby: 
a predetermined number of the first most significant bits of (1-ej.d) modulo n 
are zero; 

or said relationship as simplified whereby: 

said predetermined number of the first most significant bits of (-ej.d) modulo n 
are zero. 

29. (Previously Presented) A method according to claim 4 and in which a 
value ei has been attributed to e, wherein the computations using the value 
ecomprise: 

choosing a random integer r; 

computing a value d* such that d* = d+r.(e.d-1); and 
implementing a private operation of the algorithm in which a value x is 
obtained from a value y by applying the relationship x = y d * modulo n. 

30. (New) A method according to claim 1, wherein said cryptographic 
operation comprises at least one of encrypting data, decrypting data, signing a 
message and authenticating a message. 

31. (New) A method according to claim 15, wherein said cryptographic 
operation comprises at least one of encrypting data, decrypting data, signing a 
message and authenticating a message. 



